Doctor plugin checks: implement health check classes and documentation

Implement remediation-aware health checks across all Doctor plugin modules
(Agent, Attestor, Auth, BinaryAnalysis, Compliance, Crypto, Environment,
EvidenceLocker, Notify, Observability, Operations, Policy, Postgres, Release,
Scanner, Storage, Vex) and their backing library counterparts (AI, Attestation,
Authority, Core, Cryptography, Database, Docker, Integration, Notify,
Observability, Security, ServiceGraph, Sources, Verification).

Each check now emits structured remediation metadata (severity, category,
runbook links, and fix suggestions) consumed by the Doctor dashboard
remediation panel.

Also adds:
- docs/doctor/articles/ knowledge base for check explanations
- Advisory AI search seed and allowlist updates for doctor content
- Sprint plan for doctor checks documentation

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/__Libraries/StellaOps.Doctor.Plugins.Integration/Checks/SecretsManagerConnectivityCheck.cs

@@ -121,6 +121,7 @@ public sealed class SecretsManagerConnectivityCheck : IDoctorCheck
                     rb.AddStep(2, "Refresh authentication",
                         $"stella secrets auth refresh {unhealthy[0]}",
                         CommandType.Manual);
+                    rb.WithRunbookUrl("docs/doctor/articles/integration/integration-secrets-manager.md");
                 })
                 .WithVerification($"stella doctor --check {CheckId}")
                 .Build();
@@ -149,6 +150,7 @@ public sealed class SecretsManagerConnectivityCheck : IDoctorCheck
                     rb.AddStep(2, "Check seal status",
                         $"stella secrets status {sealed_[0]}",
                         CommandType.Shell);
+                    rb.WithRunbookUrl("docs/doctor/articles/integration/integration-secrets-manager.md");
                 })
                 .WithVerification($"stella doctor --check {CheckId}")
                 .Build();